public-work-diary

Base URL https://api.example.com

GET /api/v1/public/work-diary/{token}

Public Work Diary

Public view of shifts for the signed date range in the token. No auth header required — the HMAC signature IS the auth. 4xx error envelopes intentionally keep wording generic to avoid oracle attacks.

Parameters

token string path required

Responses

200Successful Response
422Validation Error

GET /api/v1/public/work-diary/{token}

curl -X GET 'https://api.example.com/api/v1/public/work-diary/{token}' \
  -H 'Authorization: Bearer '

import httpx

resp = httpx.get(
    "https://api.example.com/api/v1/public/work-diary/{token}",
    headers={"Authorization": "Bearer "},
)
resp.raise_for_status()
print(resp.json())

const resp = await fetch("https://api.example.com/api/v1/public/work-diary/{token}", {
  method: "GET",
  headers: { "Authorization": "Bearer " }
});
const data = await resp.json();
console.log(data);

package main

import (
	"net/http"
)

func main() {
	req, _ := http.NewRequest("GET", "https://api.example.com/api/v1/public/work-diary/{token}", nil)
	req.Header.Set("Authorization", "Bearer ")
	resp, _ := http.DefaultClient.Do(req)
	defer resp.Body.Close()
}